CVE-2026-119282 | Nrwl Nx up to 22.7.8/23.1.1 Maven Plugin/Gradle Plugin nx.json targetNamePrefix/option injection

October 29, 2026 Yanac

A vulnerability has been found in Nrwl Nx up to 22.7.8/23.1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file nx.json of the component Maven Plugin/Gradle Plugin. Performing a manipulation of the argument targetNamePrefix/option results in injection.

This vulnerability is identified as CVE-2026-119282. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More